Staff Cloud Security Engineer - Lead Cloud Defense

Scribd, Inc.; Chicago (IL); On-site; USD 147,000 - 242,000; Full time

Benefits offered by this job

Scribd Flex (flexible work model)

Health, dental and vision coverage

Paid time off (vacation, sick, hols)

Parental leave & family support

Retirement matching & equity

Job summary

Scribd, Inc. is seeking a Staff Cloud Security Engineer to shape the security direction for our AWS and GCP environments. You will lead architecture initiatives, strengthen identity models, and build guardrails that embed secure-by-default practices across engineering teams.

The role combines hands-on security with technical leadership, driving cloud security strategy while balancing risks and engineering velocity. Candidates should have deep cloud security experience and strong IaC skills.

Qualifications

• 10+ years in cloud or infrastructure security engineering with hands-on production security.
• Experience shaping security architecture and leading cross-team initiatives.
• Deep IAM expertise including least-privilege and short-lived credentials.
• Experience securing cloud workloads (Kubernetes, containers, runtime protection).
• Proficiency with Terraform or similar IaC and Python or Go.

Responsibilities

• Define and evolve cloud security architecture and guardrails across AWS/GCP.
• Strengthen identity and access management and secure cross‑account access.
• Develop reusable security capabilities and policy-as-code guardrails.
• Secure cloud deployment paths and CI/CD integrations.
• Leading complex security initiatives and mentoring engineers.

Skills

Cloud security architecture

Identity & access management

Kubernetes security

Terraform / IaC

Cloud security tooling

Threat modeling

Python/Go

Tools

Terraform

AWS

GCP

Security tooling (GuardDuty, CloudTrail)

Job description

Scribd, Inc. is seeking a Staff Cloud Security Engineer to shape the security direction for our AWS and GCP environments. You will lead architecture initiatives, strengthen identity models, and build guardrails that embed secure-by-default practices across engineering teams.

The role combines hands-on security with technical leadership, driving cloud security strategy while balancing risks and engineering velocity. Candidates should have deep cloud security experience and strong IaC skills.